AndBible: Arbitrary code execution via crafted module zip upload
AndBible, an offline Bible study app for Android, is affected by an issue in versionCode 1111 that allows arbitrary code execution. An attacker can exploit it by getting a user to upload a crafted module zip file. The CVE record does not state whether any user interaction beyond the upload is required, and no authentication is mentioned. The CVSS 9.8 score and the CWE classification in the CVE data could not be verified against NVD.
AndBible · AndBible: Bible Study
